Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/80a9451e-8654-323a-b5e8-f2565df2070b.roa
File:                     80a9451e-8654-323a-b5e8-f2565df2070b.roa (raw, json)
Hash identifier:          iq8yZoZyQPf4ivoj7cbxni3h5AtgBpxmqrv8OKRxsow=
Subject key identifier:   D3:FD:31:8C:26:48:57:E9:C3:08:94:28:05:A9:1F:0C:77:9D:07:33
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584EBB11C3AE545CDFC074B02600
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/80a9451e-8654-323a-b5e8-f2565df2070b.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     19316
IP address blocks:        207.172.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:c3:ae:54:5c:df:c0:74:b0:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=7a7fbc1e-6998-4627-961b-9c93a107f817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:32:1b:47:86:82:68:85:15:5b:b3:e2:f6:
                    a9:23:b0:57:8d:17:ef:cb:e7:d9:d9:f5:1d:5d:0e:
                    98:bb:77:fd:dd:6c:15:46:85:4a:27:d2:37:0e:bb:
                    cb:7f:98:2f:89:e5:bd:6f:dd:11:51:76:f1:d4:b3:
                    98:a2:5d:10:d0:96:c0:c8:fb:b3:6c:7d:86:04:8a:
                    be:2c:05:55:05:0b:2a:74:24:c1:6e:96:5b:18:a8:
                    d2:59:fb:f9:35:5e:bf:b5:3d:6a:f9:e0:d5:d8:33:
                    da:ba:5f:37:38:26:57:73:4c:d3:63:62:55:57:8d:
                    e8:12:95:f3:65:4d:01:dc:ae:bf:aa:b8:a3:38:cf:
                    39:49:4b:cf:a0:91:e0:42:4b:83:8a:6b:ff:22:0d:
                    a9:d5:cc:e4:3d:b7:35:1a:bb:45:34:74:9d:b9:48:
                    9c:25:a8:2a:c6:97:95:76:47:f3:71:04:bb:87:99:
                    9d:42:d8:9d:00:da:65:d4:98:2f:61:05:cf:43:80:
                    b9:07:19:1e:e5:86:57:55:0f:37:d6:42:8d:47:3e:
                    8e:a1:45:a1:4e:e3:f1:31:79:69:a9:ba:6c:68:8b:
                    20:32:9c:a2:d9:97:20:2f:d7:10:0a:85:b6:44:2f:
                    44:e6:1d:0d:2a:0f:b5:e8:6c:a2:33:04:1e:94:4f:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FD:31:8C:26:48:57:E9:C3:08:94:28:05:A9:1F:0C:77:9D:07:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/80a9451e-8654-323a-b5e8-f2565df2070b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.172.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:db:ba:93:1a:3a:12:03:59:c9:2b:b3:5b:9d:7f:6b:9f:07:
         2f:d1:38:e3:cd:ca:be:89:7d:07:15:8c:6b:8b:f5:39:b6:e8:
         14:fe:26:56:fa:b6:19:fa:17:5e:6a:41:38:c6:17:24:54:22:
         53:41:ad:70:b3:83:31:ef:c2:ab:0a:8b:6f:21:0b:3b:eb:87:
         3e:25:f5:58:ed:be:60:81:bb:d4:3f:5c:d5:ea:f4:e5:60:38:
         09:32:ff:7c:c4:4e:66:28:94:af:5e:e7:0f:a0:8b:50:fa:fc:
         fe:5a:18:c6:1a:9d:be:30:76:ec:18:bf:ab:a3:b3:7a:2e:96:
         91:bd:b1:d3:bc:67:d3:9f:4e:09:f8:8e:c4:fa:03:4a:43:f8:
         46:e4:0c:2b:98:b8:f8:bd:36:e2:01:da:70:bc:2d:06:8b:25:
         42:9b:b4:02:ca:00:e8:0b:d8:0b:47:36:75:9b:a6:ff:3d:46:
         35:04:38:8b:dd:ce:75:fd:14:a0:23:d5:80:2f:89:80:af:61:
         13:95:dc:03:b4:b5:16:45:5a:6e:37:c9:5e:fe:25:c0:a3:55:
         c7:a2:b3:b4:e0:77:3e:ff:10:03:a8:69:31:fc:3c:d3:68:1c:
         cc:7e:60:29:34:d6:17:0b:df:40:f9:35:8b:81:4e:a1:58:94:
         00:6d:a0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:10:03 2026 by rpki-client